ntdll

Documentation

Index

• func RtlCopyMemory(dest uintptr, src uintptr, len uint32) (err error)
• func RtlCreateUserThread(hProcess uintptr, ...) (addr uintptr, err error)

Functions

func RtlCopyMemory

func RtlCopyMemory(dest uintptr, src uintptr, len uint32) (err error)

RtlCopyMemory routine copies the contents of a source memory block to a destination memory block void RtlCopyMemory(

void*       Destination,
const void* Source,
size_t      Length

); https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-rtlcopymemory

func RtlCreateUserThread

func RtlCreateUserThread(hProcess uintptr, lpSecurityDescriptor, bSuspended, zeroBits, maxStack, commitSize, lpStartAddress, pParam, hThread, pClient uintptr) (addr uintptr, err error)

RtlCreateUserThread

NTSTATUS
RtlCreateUserThread(
	IN HANDLE Process,
	IN PSECURITY_DESCRIPTOR ThreadSecurityDescriptor OPTIONAL,
	IN BOOLEAN CreateSuspended,
	IN ULONG ZeroBits OPTIONAL,
	IN SIZE_T MaximumStackSize OPTIONAL,
	IN SIZE_T CommittedStackSize OPTIONAL,
	IN PUSER_THREAD_START_ROUTINE StartAddress,
	IN PVOID Parameter OPTIONAL,
	OUT PHANDLE Thread OPTIONAL,
	OUT PCLIENT_ID ClientId OPTIONAL
);

https://doxygen.reactos.org/da/d0c/sdk_2lib_2rtl_2thread_8c.html#ae5f514e4fcb7d47880171175e88aa205